$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/377ffc91-1c72-3a82-ba57-28b38183f0ee.roa File: 377ffc91-1c72-3a82-ba57-28b38183f0ee.roa (raw, json) Hash identifier: udNUYHSwQtREArRaLiiSg9LLr2E29O9wpdoiUPZH0kk= Subject key identifier: BA:59:9C:3F:10:31:CB:C6:2A:DE:43:59:BB:D2:C1:D4:14:3F:9C:4A Certificate issuer: /CN=3425f5dc-cd25-4419-9cf8-b269b4d13e70 Certificate serial: 010D0C9F4328584F45429968D83D245014AA5DA0 Authority key identifier: BB:6A:D0:C7:FB:0C:8B:22:8B:5B:AE:F1:73:68:52:B4:BE:F1:C4:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/377ffc91-1c72-3a82-ba57-28b38183f0ee.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 22466 IP address blocks: 104.152.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/3425f5dc-cd25-4419-9cf8-b269b4d13e70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/3425f5dc-cd25-4419-9cf8-b269b4d13e70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:99:68:d8:3d:24:50:14:aa:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3425f5dc-cd25-4419-9cf8-b269b4d13e70 Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=f3c9956e-4bda-4ee5-bb3f-a91829d41236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:ab:51:bc:ac:4d:6d:40:e0:25:68:41:0e: a0:9a:2d:e7:a9:cd:1d:4e:a9:7a:b9:c3:ed:11:07: b3:bf:bb:b4:28:8f:e6:94:1f:8c:f4:62:94:83:a0: c7:62:e8:25:eb:f6:d9:53:06:be:03:a4:95:1e:8c: 24:64:31:db:aa:62:ec:32:70:de:1c:26:3a:60:05: f1:d4:ca:f5:37:a7:e7:df:ee:f9:b7:39:3e:e0:80: 72:ef:12:56:32:8f:a4:00:62:ab:3b:06:06:dd:ee: ae:d0:b9:f4:d5:ee:87:0c:6b:89:58:6a:da:13:0b: b2:ef:5c:3f:ef:e4:ae:0a:d8:a5:3d:93:b1:9f:c7: f2:be:21:4f:e7:a5:35:c0:e2:e6:0d:88:35:7a:8d: 02:08:48:94:63:61:87:e6:8d:40:8b:94:8f:b8:a9: 38:8a:12:5d:af:2a:96:cd:a2:de:68:3c:f1:7b:e0: f9:c1:f7:2b:64:d5:f1:7f:a9:6b:a6:e1:51:ba:23: c7:93:05:11:68:8f:c2:0c:66:5c:c3:91:56:c3:14: 1c:3e:b0:ee:cb:33:c8:f0:c9:c5:d8:12:95:94:d9: ff:b5:a0:ed:99:5c:46:4d:87:af:54:04:ae:01:c3: 6d:73:fc:56:04:d8:d2:e4:68:b6:42:42:e2:4b:86: e3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:59:9C:3F:10:31:CB:C6:2A:DE:43:59:BB:D2:C1:D4:14:3F:9C:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/377ffc91-1c72-3a82-ba57-28b38183f0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/3425f5dc-cd25-4419-9cf8-b269b4d13e70.crl X509v3 Authority Key Identifier: keyid:BB:6A:D0:C7:FB:0C:8B:22:8B:5B:AE:F1:73:68:52:B4:BE:F1:C4:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70.cer sbgp-ipAddrBlock: critical IPv4: 104.152.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:12:94:cf:6e:6f:af:25:a6:48:8c:fc:42:17:33:f8:13:5c: 32:00:9e:03:a4:74:d5:2e:f8:4d:7c:06:2f:99:38:31:21:9a: d5:bb:e3:fa:36:09:ed:9b:f2:af:5d:c9:28:58:59:f1:2d:98: 2f:ce:b9:02:44:f0:5a:8a:82:54:f5:7a:fe:51:ae:aa:3c:5b: 23:64:50:f5:76:65:38:dc:3d:01:83:99:1b:a3:74:83:08:c4: ca:24:24:11:2b:2d:26:41:bb:89:f1:3b:ed:ec:f6:a4:a2:c9: a8:a6:e7:17:bd:23:c5:b8:4d:7a:9f:1f:7b:e9:f9:01:7e:bc: 6f:ab:6f:c2:9c:75:81:f2:5f:b8:df:5a:a0:ab:7f:b4:72:c2: 15:c8:61:b1:e4:62:5d:63:5b:1b:11:27:36:95:1f:bd:b8:9b: 3d:e7:f6:0f:69:12:8e:56:ff:68:4c:9f:40:db:41:5a:8d:fe: 31:e4:aa:10:07:be:77:e4:16:29:07:9e:9c:99:cb:45:4d:a1: 83:60:cd:a3:1a:5b:2f:c6:a8:c9:4d:0b:ae:0b:d6:db:a9:9d: d2:de:d2:00:5d:b2:62:5e:81:5f:1c:63:59:29:07:8e:f5:1d: f3:87:10:48:4d:cc:42:b7:6e:ba:00:a8:fd:35:e2:c7:19:36: d1:d1:31:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQplo2D0kUBSqXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyNWY1ZGMtY2QyNS00NDE5LTljZjgtYjI2OWI0ZDEz ZTcwMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk ZjNjOTk1NmUtNGJkYS00ZWU1LWJiM2YtYTkxODI5ZDQxMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbGrUbysTW1A4CVoQQ6gmi3nqc0dTql6ucPt EQezv7u0KI/mlB+M9GKUg6DHYugl6/bZUwa+A6SVHowkZDHbqmLsMnDeHCY6YAXx 1Mr1N6fn3+75tzk+4IBy7xJWMo+kAGKrOwYG3e6u0Ln01e6HDGuJWGraEwuy71w/ 7+SuCtilPZOxn8fyviFP56U1wOLmDYg1eo0CCEiUY2GH5o1Ai5SPuKk4ihJdryqW zaLeaDzxe+D5wfcrZNXxf6lrpuFRuiPHkwURaI/CDGZcw5FWwxQcPrDuyzPI8MnF 2BKVlNn/taDtmVxGTYevVASuAcNtc/xWBNjS5Gi2QkLiS4bjYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpZnD8QMcvGKt5DWbvSwdQUP5xKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNDI1 ZjVkYy1jZDI1LTQ0MTktOWNmOC1iMjY5YjRkMTNlNzAvMzc3ZmZjOTEtMWM3Mi0z YTgyLWJhNTctMjhiMzgxODNmMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzQyNWY1ZGMtY2QyNS00NDE5LTlj ZjgtYjI2OWI0ZDEzZTcwLzM0MjVmNWRjLWNkMjUtNDQxOS05Y2Y4LWIyNjliNGQx M2U3MC5jcmwwHwYDVR0jBBgwFoAUu2rQx/sMiyKLW67xc2hStL7xxEEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNDI1ZjVkYy1jZDI1LTQ0MTktOWNmOC1iMjY5 YjRkMTNlNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaJjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQSlM9ub68lpkiM/EIXM/gTXDIAngOkdNUu+E18Bi+ZODEhmtW74/o2 Ce2b8q9dyShYWfEtmC/OuQJE8FqKglT1ev5Rrqo8WyNkUPV2ZTjcPQGDmRujdIMI xMokJBErLSZBu4nxO+3s9qSiyaim5xe9I8W4TXqfH3vp+QF+vG+rb8KcdYHyX7jf WqCrf7RywhXIYbHkYl1jWxsRJzaVH724mz3n9g9pEo5W/2hMn0DbQVqN/jHkqhAH vnfkFikHnpyZy0VNoYNgzaMaWy/GqMlNC64L1tupndLe0gBdsmJegV8cY1kpB471 HfOHEEhNzEK3broAqP014scZNtHRMRs= -----END CERTIFICATE-----Generated at Sat Sep 26 09:03:11 2026 by rpki-client